The project so far is that the configuration is completed. Moving to phase of rolling out.

The earlier issues is solved WSUS is now working fine and Window update remediation is work perfectly well.

I am available for anybody who need answer question and clarifications if you are deploying the same.

Yeah the catch is between selecting severity check and Cisco define check. For some reason with severity check Agent will not be able to contact WSUS and will not be able to cross check the update.

Please an issues just came up AV fails automatic remediation. I thought it's the simplest until I encounter it. The anti-virus server is McAfee is there any way out of this?

Also is there a way of filtering posture check summary from agent to only failed posture.

Find in the attached.

Your urgent response will be appreciated.

Thanks.

Really packet capture shows that the packet is not reaching the server during posture but what I notice is if authc is using DOT1X I could not ping though ICMP is allowed but MAB I could ping.

By filter I mean you want to limit security check summary report as indicated in the attached document to only fail posture. You want to remove the pass posture so that user does not need to know what posture is looking for.

Thanks MC,

I have sorted out the issues. The problem here is with RACL so what I have to do is invert DACL and specifically use the inverted for RACL and that sort things out.

It's amazing how ACL redirection can be a big pain is not properly handle.

I appreciate you..